Creating a SOA Application Gateway Center of Excellence
•
4 gostaram•2,075 visualizações
In this session, we will describe a phased approach to establishing an enterprise SOA Appliance/Application Gateway Center of Excellence in a heterogeneous environment with varied tools. We will go through a detailed best practices-based approach with pattern-based implementation to lay down the foundation of a DataPower CoE. This approach will include building the right resource model, determining the appropriate list of reusable artifacts, and selecting best-of-breed technology. We will also discuss balancing long-term visions with immediate goals, agile development and delivery, deployment topology, reusable common service patterns, frameworks, DataPower continuous integration and delivery, integrating with CentraSite, Venafi, Jenkins, RSA, WebMethods, CoE Road map, ESB, PCI, and API Integration.
Recomendados
Recomendados
Mais conteúdo relacionado
Mais de Prolifics
Mais de Prolifics (20)
Último
Último (20)
Creating a SOA Application Gateway Center of Excellence
- 1. Creating a SOA Application Gateway Center of Excellence 2013 Enterprise Integration Services Prithvi Srinivasan – SOA/Integration Practice Director(PROLIFICS) Krishna Alluru – Manager IT(ESB)-(STAPLES) Tate Crumbley – Solutions Architect(STAPLES)
- 2. Enterprise Integration Services SOA Gateway COE - Agenda • Background – Corporate Overview – IT Overview – Business case for SOA appliance – Original state – Reference Architecture – Future state • Approach – Guiding Principles – Agile Methodology – COE Approach – Role & Scope of Datapower • Architecture • logical architecture • Physical and HA, Monitoring and Disaster Recovery • Detailed Architecture • COE Modules – Implementation – Reusable Patterns • Security • Integration • Governance • Composite – Standards and Guidelines Documentation – Continuous Integration • Closing notes – Take away
- 4. Enterprise Integration Services Background -Corporate Overview • Staples is the world’s largest office products company and second largest internet retailer. • For 26 years, Staples has served the needs of business customers and its vision is to provide every product businesses need to succeed. • Through its world-class retail, online and delivery capabilities, Staples offers office supplies, technology products and services, facilities and breakroom supplies, furniture, copy and print services and a wide range of other product categories. • With thousands of associates worldwide dedicated to making it easy for businesses of all sizes, Staples operates throughout North and South America, Europe, Asia, Australia and New Zealand.
- 5. Enterprise Integration Services Background - IT Overview 2400 FTE capacity in the global IT organization Multiple data centers – domestic and international A portfolio exceeding 800 applications IT development, management and governance activities Applications • Manage and prioritize enterprise work • Reduce ‘lights on’ costs by consolidating applications • Migrate existing applications to common enterprise services Infrastructure • Virtualization and enterprise governance • Standard service catalog with well understood SLAs • Implement ITIL, CMDB methodologies and tools
- 6. Enterprise Integration Services Background - Business Use cases Security • PCI Compliance • Protect Staples applications and infrastructure from internal and external security threats Service Governance • Runtime representation of Service Catalogue • Staples API Accelerators - Increased performance without compromising design
- 7. Enterprise Integration Services Background - Staples Original State
- 8. Enterprise Integration Services Background - Staples Reference Architecture Gateway Gateway Security Security
- 9. Enterprise Integration Services Background - Staples Current State Broker Broker IS IS Database MWS Optimize ActiveTransfer CentraSite Enterprise Service Bus MQ MQ Replicated AMLAML IS Broker ServiceConsumers HTTP/s SOAP SOAP_JMS ServiceProviders HTTP/s SOAP SOAP_JMS Native File FTP Native Identity RegistrySource Code Control SiteScope ovo CactiIT Monitoring XMLGatewayAppliance XMLGatewayAppliance
- 11. Enterprise Integration Services Approach - Guiding Principles • Single point for management/control • Configuration driven development • Continuous delivery • Use tools based on their strengths, market usage and TCO • New Implementations follow existing design patterns & frameworks
- 12. Enterprise Integration Services Approach – Agile Development • Incremental delivery • Continuous integration • Working software through reference implementations • Architecture envisioning
- 13. Enterprise Integration Services Approach – COE • Central team for creating and maintaining vision and plans • Reusability & Reduced time to market • Balance short term vs long term • Engineering Discipline
- 14. Enterprise Integration Services Approach - Role & Scope of Datapower
- 16. Enterprise Integration Services Architecture- Logical Design
- 17. Enterprise Integration Services Architecture - Physical Architecture
- 18. Enterprise Integration Services Architecture - Macro Design Routing HTTP(s) MPG Business Service Group Security Domain Routing Domain SOAP Sec MPG XML Sec MPG Sec MQ-Text Sec JSON Routing MQ MPG SOAP Sec MPG XML Sec MPG Sec MQ-Text Sec JSON Business Service Group Application Domain
- 19. COE Modules 2013 Enterprise Integration Services
- 20. Enterprise Integration Services Reusable Patterns - Security • Service Perimeter Guard • Tamper Proof Validation (Signatures) • Data Confidentiality (Encryption) • SSL Termination • Message Screening/Threat Protection • Authentication/Authorization/Auditing
- 21. Enterprise Integration Services Reusable Patterns - Integration • Protocol Bridging • Service Facade • Content-Based Route • Message Translator
- 22. Enterprise Integration Services Reusable Patterns - Integration • Normalizer • Polling Consumer • Multi-Channel endpoint • Legacy Wrapper • Exception Shielding
- 23. Enterprise Integration Services Reusable Patterns - Governance • Decoupled Contract • Service Level Agreement (SLA) Enforcer • Concurrent Contracts
- 24. Security Gateway Enterprise Integration Services Reusable Patterns - Composite Simple Patterns Used • Protocol Bridging • Service Façade • Polling Consumer • Authentication • Authorization • Auditing • Security Gateway • Content Filter
- 25. Internal ESB Gateway Enterprise Integration Services Reusable Patterns - Composite Simple Patterns Used • Protocol Bridging • Service Façade • Content-Based Router • Polling Consumer • Legacy Wrapper • Decoupled Contract • Concurrent Contracts • SLM Enforcer • Exception Shielding • Threat Protection • Authentication • Authorization • Auditing • Security Gateway
- 26. DMZ ESB Gateway Enterprise Integration Services Reusable Patterns - Composite Simple Patterns Used • Protocol Bridging • Service Façade • Content-Based Router • Exception Shielding • Threat Protection • Authentication • Authorization • Auditing • Tamper Proof Validation • Data Confidentiality • Security Gateway
- 27. Enterprise Integration Services Standards and Guidelines Documentation Infrastructure Model for DataPower • DataPower physical infrastructure design with Multisite High Availability, Disaster Recovery • DataPower domains • Appliance Configuration • DataPower Network Configuration DataPower Best Practice Guidelines • Administration • Development • Configuration • Architecture • Deployment • Backup & Restoration Staples Enterprise Reusable Design Patterns – Security/Integration/Governance /Composite • Based on Staples requirements created predefined design & development patterns that can be readily used by future developers to tackle project requirements
- 28. Standards and Guidelines Documentation DataPower Build, Merge & Deployment automation Guides • Document that explains about creating DataPower code build and merging different code builds. Also, it provides tips and tricks to help automate the deployment of created code builds to single/multiple environments DataPower path to production • Release management solution to help release DataPower code in fast, secure and automated manner. DataPower Support & Maintenance • Document and processes that can be used by support team to perform • Application support • Infrastructure support • Upgrades • Alerting & Monitoring • Backup & restoration of the appliance meta data and application meta data on a regular basis Reference Implementations • A sample reference implementation of each pattern is created in the Design patterns document
- 29. Continuous Integration • Ability deploy all ESB components as a single deployable unit • Continuous testing to validate backward compatibility and functional integrity Enterprise Integration Services
- 30. Closing Notes 2013 Enterprise Integration Services
- 31. Enterprise Integration Services Closing Notes-Take away • Clearly define the usage scope • Iterative releases • Stick to common patterns • Follow 80-20 rule • Use best practices • Socialize, training and documentation
- 32. Enterprise Integration Services SOA Gateway - COE Slide 5 - http://www.ssihq.net/ Slide 6 - http://rmi.org Slide 11 - http://csr-news.net/main/2011/06/21/un-human-rights-council-adopts-guiding-principles-on-business-and- human-rights/ Slide 12 - http://www.ormlondon.com/blog/is-there-an-agile-advantage/ Slide 13 - http://frommilkitchen.wordpress.com/2010/12/10/center-of-excellence-coe/
Notas do Editor
- Background Corporate OverviewIT OverviewBusiness case for SOA appliance Original stateReference ArchitectureFuture stateApproachGuiding PrinciplesAgile MethodologyCOE ApproachRole & Scope of Datapower 10 minsArchitecture logical architecturePhysical and HA, Monitoring and Disaster RecoveryDetailed ArchitectureCOE Modules – Implementation 15 minsReusable PatternsSecurityIntegrationGovernanceCompositeStandards and Guidelines DocumentationContinuous IntegrationClosing notes 5Take away
- Add Security in the Gateway
- Change to SOA Gateway